Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB01321295.exe' = '"%APPDATA%\KB01321295.exe"'
- %APPDATA%\KB01321295.exe
- <SYSTEM32>\cscript.exe
- %TEMP%\exp1.tmp.bat
- %APPDATA%\KB01321295.exe
- '20#.#17.147.52':8080
- '21#.#4.194.242':8080
- '64.##.164.18':8080
- '21#.#6.23.100':8080
- '85.##6.179.185':8080
- '21#.#4.250.173':8080
- '12#.#9.61.59':8080
- '20#.#69.13.84':8080
- '31.##.189.212':8080
- '58.#8.2.214':8080
- '18#.#35.150.72':8080
- '18#.#06.189.124':8080
- '41.##8.5.140':8080
- ClassName: 'Indicator' WindowName: ''